Deployment Architecture

What is the replication_factor in the SH's shclustering?

ddrillic
Ultra Champion

On the SH I see -

[shclustering]
....
replication_factor = 3

What is the replication_factor in this context?

In the indexer cluster, we have a replication and search factor of 2.

Tags (1)
0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

The replication factor determines the number of copies of each search artifact, or search result, that the cluster maintains. Replication occurs only for artifacts from scheduled saved searches. The cluster does not replicate results from ad hoc searches or realtime searches. (From https://docs.splunk.com/Documentation/Splunk/7.3.0/DistSearch/ChooseSHCreplicationfactor)

---
If this reply helps you, Karma would be appreciated.

View solution in original post

richgalloway
SplunkTrust
SplunkTrust

The replication factor determines the number of copies of each search artifact, or search result, that the cluster maintains. Replication occurs only for artifacts from scheduled saved searches. The cluster does not replicate results from ad hoc searches or realtime searches. (From https://docs.splunk.com/Documentation/Splunk/7.3.0/DistSearch/ChooseSHCreplicationfactor)

---
If this reply helps you, Karma would be appreciated.

ddrillic
Ultra Champion

Makes perfect sense @richgalloway - thank you.

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...